forlagetunivers.dk XSS vulnerability

Vulnerable URL: http://www.forlagetunivers.dk/book.php?id=41〈=da"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11904013 VIP website status:| No Coordinated Disclosure Timelin...

zaalbooks.nl XSS vulnerability

Vulnerable URL: http://www.zaalbooks.nl/books/book.php?full='"--!confirmOPENBUGBOUNTY...

PT-2013-2046

Name of the Vulnerable Software and Affected Versions Elastix version 2.3.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the Page parameter in the xmlservices/E book.php file...

CVE-2011-5200

Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 list.php, 2 members.php, or 3 book.php...

CVE-2011-5200: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 list.php, 2 members.php, or 3 book.php...

PT-2012-2177

Name of the Vulnerable Software and Affected Versions DeDeCMS version 5.6 Description The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved by manipulating the id parameter in the following API endpoints: "list.php",...

PT-2012-5309

Name of the Vulnerable Software and Affected Versions Travelon Express version 6.2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several API endpoints, including "holiday.php" and "holiday book.php" using the hid parameter, "pages.php"...

Sql injection

Multiple SQL injection vulnerabilities in Tourism Script Accommodation Hotel Booking Portal Script allow remote attackers to execute arbitrary SQL commands via the hotelid parameter to 1 hotel.php, 2 details.php, 3 roomtypes.php, 4 photos.php, 5 map.php, 6 weather.php, 7 reviews.php, and 8 book.p...